| ID | 91559 |
| Package Name | vaultwarden |
| Version | 1.36.0 |
| Release | 1.fc44 |
| Epoch | |
| Draft | False |
| Source | git+https://src.fedoraproject.org/rpms/vaultwarden.git#8c62389194002aeffb1fd71deaeed7a8b62fc920 |
| Summary |
| Description |
| Built by | davidlt |
| State |
complete
|
| Volume |
DEFAULT |
| Started | Fri, 12 Jun 2026 06:26:25 UTC |
| Completed | Fri, 12 Jun 2026 14:27:52 UTC |
| Task | build (f44, /rpms/vaultwarden.git:8c62389194002aeffb1fd71deaeed7a8b62fc920) |
| Extra | {'source': {'original_url': 'git+https://src.fedoraproject.org/rpms/vaultwarden.git#8c62389194002aeffb1fd71deaeed7a8b62fc920'}} |
| Tags |
|
| RPMs |
| src | |
|---|
|
vaultwarden-1.36.0-1.fc44.src.rpm (info) (download) |
| riscv64 |
|
vaultwarden-1.36.0-1.fc44.riscv64.rpm (info) (download)
|
|
vaultwarden-debuginfo-1.36.0-1.fc44.riscv64.rpm (info) (download)
|
|
vaultwarden-debugsource-1.36.0-1.fc44.riscv64.rpm (info) (download)
|
|
| Logs |
|
| Changelog |
* Wed Jun 03 2026 Jonathan Wright <jonathan@almalinux.org> - 1.36.0-1
- update to 1.36.0 rhbz#2368636
- Fix bitwarden mobile app not working rhbz#2437599
- Fix CVE-2025-58160 vaultwarden: Tracing log pollution
- Fix CVE-2026-25537 vaultwarden: jsonwebtoken has Type Confusion that leads to potential authorization bypass
- Fix CVE-2026-25727 vaultwarden: time affected by a stack exhaustion denial of service attack
- Fix CVE-2026-26012 vaultwarden: Information disclosure due to bypassed collection permissions
- Fix CVE-2026-27898 vaultwarden: Information disclosure via API partial update
- Fix CVE-2026-27803 vaultwarden: Unauthorized collection management operations due to improper access control
- Fix CVE-2026-27801 vaultwarden: Two-factor authentication bypass allows unauthorized access and data deletion
* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.34.2-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Tue Jul 29 2025 Jonathan Wright <jonathan@almalinux.org> - 1.34.2-1
- update to 1.34.2 rhbz#2368636
* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.33.2-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Wed Apr 23 2025 Jonathan Wright <jonathan@almalinux.org> - 1.33.2-2
- Build against mariadb-connector-c-devel instead of mariadb-devel
* Mon Feb 10 2025 Jonathan Wright <jonathan@almalinux.org> - 1.33.2-1
- update to 1.33.2 rhbz#2343535
Fix CVE-2025-0977 ssl::select_next_proto use after free rhbz#2344558
* Thu Jan 30 2025 Jonathan Wright <jonathan@almalinux.org> - 1.33.0-1
- update to 1.33.0 rhbz#2342073
Fix GHSA-f7r5-w49x-gxm3 Getting access to the Admin Panel via CSRF
Fix CVE-2025-24364 RCE in the admin panel
Fix CVE-2025-24365 escalation of privilege via variable confusion in OrgHeaders trait
* Tue Jan 21 2025 Jonathan Wright <jonathan@almalinux.org> - 1.32.7-4
- Set VW_VERSION env var during build and install rhbz#2338534
* Sun Jan 19 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.32.7-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild
* Wed Jan 15 2025 Jonathan Wright <jonathan@almalinux.org> - 1.32.7-2
- fix build on el9 with rust 1.79
* Fri Jan 03 2025 Jonathan Wright <jonathan@almalinux.org> - 1.32.7-1
- update to 1.32.7 rhbz#2322181
- Fix CVE-2024-56335
* Tue Oct 22 2024 Jonathan Wright <jonathan@almalinux.org> - 1.32.2-1
- update to 1.32.2 rhbz#2316657
* Sun Aug 11 2024 Jonathan Wright <jonathan@almalinux.org> - 1.32.0-1
- update to 1.32.0 rhbz#2304045
Resolves CVE-2024-39924
Resolves CVE-2024-39925
Resolves CVE-2024-39926
* Fri Aug 02 2024 Jonathan Wright <jonathan@almalinux.org> - 1.31.0-2
- Exclude s390x and ppc64le
* Fri Jul 19 2024 Jonathan Wright <jonathan@almalinux.org> - 1.31.0-1
- update to 1.31.0 rhbz#2297149
|
